https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Fri, 02 Oct 2026 22:33:48 +0000 https://cve.radiocsirt.org/vuln/bdu:2022-05873 bdu:2022-05873 https://cve.radiocsirt.org/vuln/bdu:2022-05873 https://cve.radiocsirt.org/vuln/bell-cve-2019-13115 <p><strong>Withdrawn by the publisher.</strong></p> <p><strong>Withdrawn by the publisher.</strong></p> https://cve.radiocsirt.org/vuln/bell-cve-2019-13115 https://cve.radiocsirt.org/vuln/cnvd-2019-26805 cnvd-2019-26805 https://cve.radiocsirt.org/vuln/cnvd-2019-26805 https://cve.radiocsirt.org/vuln/euvd-2026-55470 EUVD-2026-55470 https://cve.radiocsirt.org/vuln/euvd-2026-55470 https://cve.radiocsirt.org/vuln/fkie_cve-2019-13115 <p>In libssh2 before 1.9.0, kex_method_diffie_hellman_group_exchange_sha256_key_exchange in kex.c has an integer overflow that could lead to an out-of-bounds read in the way packets are read from the server. A remote attacker who compromises a SSH server may be able to disclose sensitive information or cause a denial of service condition on the client system when a user connects to the server. This is related to an _libssh2_check_length mistake, and is different from the various issues fixed in 1.8.1, such as CVE-2019-3855.</p> <p>In libssh2 before 1.9.0, kex_method_diffie_hellman_group_exchange_sha256_key_exchange in kex.c has an integer overflow that could lead to an out-of-bounds read in the way packets are read from the server. A remote attacker who compromises a SSH server may be able to disclose sensitive information or cause a denial of service condition on the client system when a user connects to the server. This is related to an _libssh2_check_length mistake, and is different from the various issues fixed in 1.8.1, such as CVE-2019-3855.</p> https://cve.radiocsirt.org/vuln/fkie_cve-2019-13115 https://cve.radiocsirt.org/vuln/ghsa-98vm-qgxx-5rjm <p>In libssh2 before 1.9.0, kex_method_diffie_hellman_group_exchange_sha256_key_exchange in kex.c has an integer overflow that could lead to an out-of-bounds write in the way packets are read from the server. A remote attacker who compromises a SSH server may be able to execute code on the client system when a user connects to the server. This is related to an _libssh2_check_length mistake, and is different from the various issues fixed in 1.8.1, such as CVE-2019-3855.</p> <p>In libssh2 before 1.9.0, kex_method_diffie_hellman_group_exchange_sha256_key_exchange in kex.c has an integer overflow that could lead to an out-of-bounds write in the way packets are read from the server. A remote attacker who compromises a SSH server may be able to execute code on the client system when a user connects to the server. This is related to an _libssh2_check_length mistake, and is different from the various issues fixed in 1.8.1, such as CVE-2019-3855.</p> https://cve.radiocsirt.org/vuln/ghsa-98vm-qgxx-5rjm https://cve.radiocsirt.org/vuln/gsd-2019-13115 gsd-2019-13115 https://cve.radiocsirt.org/vuln/gsd-2019-13115 https://cve.radiocsirt.org/vuln/ubuntu-cve-2019-13115 <p><strong>Affected:</strong> Ubuntu:Pro:14.04:LTS: libssh2, Ubuntu:Pro:16.04:LTS: libssh2, Ubuntu:Pro:18.04:LTS: libssh2, Ubuntu:Pro:20.04:LTS: libssh2</p> <p>In libssh2 before 1.9.0, kex_method_diffie_hellman_group_exchange_sha256_key_exchange in kex.c has an integer overflow that could lead to an out-of-bounds read in the way packets are read from the server. A remote attacker who compromises a SSH server may be able to disclose sensitive information or cause a denial of service condition on the client system when a user connects to the server. This is related to an _libssh2_check_length mistake, and is different from the various issues fixed in 1.8.1, such as CVE-2019-3855.</p> <p><strong>Affected:</strong> Ubuntu:Pro:14.04:LTS: libssh2, Ubuntu:Pro:16.04:LTS: libssh2, Ubuntu:Pro:18.04:LTS: libssh2, Ubuntu:Pro:20.04:LTS: libssh2</p> <p>In libssh2 before 1.9.0, kex_method_diffie_hellman_group_exchange_sha256_key_exchange in kex.c has an integer overflow that could lead to an out-of-bounds read in the way packets are read from the server. A remote attacker who compromises a SSH server may be able to disclose sensitive information or cause a denial of service condition on the client system when a user connects to the server. This is related to an _libssh2_check_length mistake, and is different from the various issues fixed in 1.8.1, such as CVE-2019-3855.</p> https://cve.radiocsirt.org/vuln/ubuntu-cve-2019-13115 https://cve.radiocsirt.org/vuln/wid-sec-w-2023-2301 <p>Ein entfernter, anonymer Angreifer kann eine Schwachstelle in libssh2 ausnutzen, um einen Denial of Service Angriff durchzuführen oder vertrauliche Daten einzusehen.</p> <p>Ein entfernter, anonymer Angreifer kann eine Schwachstelle in libssh2 ausnutzen, um einen Denial of Service Angriff durchzuführen oder vertrauliche Daten einzusehen.</p> https://cve.radiocsirt.org/vuln/wid-sec-w-2023-2301